Keep task input separate from evaluation
Put knowledge the agent should receive ininput. Exact checks, scoring rubrics, dataset selection, and future sequence controls belong to the simulation definition, not the agent’s task prompt.
A target receives scenario correlation identity, not a copy of the answer key.